Try to deploy rundeck - cluster - Infrastructure files for Nordgedanken and Midnightthoughts.

commit d6e2c507236de20ab898e476a9547aad8b469a2d
parent e53814f2751ed7863913ede6fd3d57f6a12c72dd
Author: MTRNord <mtrnord1@gmail.com>
Date:   Tue,  4 Feb 2025 11:27:58 +0100

Try to deploy rundeck

Diffstat:
M apps/2024_cluster/kustomization.yaml  | 1 +
M apps/2024_cluster/namespaces/kustomization.yaml  | 1 +
A apps/2024_cluster/namespaces/rundeck.yaml  | 4 ++++
M apps/2024_cluster/secrets/kustomization.yaml  | 1 +
M apps/2024_cluster/secrets/pg-secrets.yaml  | 290 ++++++++++++++++++++++++++++++++++++++++++++-----------------------------------
A apps/2024_cluster/secrets/rundeck.yaml  | 60 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
A apps/base/rundeck/kustomization.yaml  | 6 ++++++
A apps/base/rundeck/release.yaml  | 70 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
A apps/base/rundeck/repository.yaml  | 8 ++++++++
M infrastructure/configs/cnpg-cluster.yaml  | 119 ++++++++++++++++++++++++++++++++++++++++++++++++++++---------------------------

10 files changed, 389 insertions(+), 171 deletions(-)
diff --git a/apps/2024_cluster/kustomization.yaml b/apps/2024_cluster/kustomization.yaml
@@ -40,3 +40,4 @@ resources:
     - ../base/miro-neoboard-exporter
     - ../base/envoy-gateway
     #- ../base/vault
+    - ../base/rundeck
diff --git a/apps/2024_cluster/namespaces/kustomization.yaml b/apps/2024_cluster/namespaces/kustomization.yaml
@@ -29,3 +29,4 @@ resources:
     - neoboard.yaml
     - envoy-gateway.yaml
     - vault.yaml
+    - rundeck.yaml
diff --git a/apps/2024_cluster/namespaces/rundeck.yaml b/apps/2024_cluster/namespaces/rundeck.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+    name: rundeck
diff --git a/apps/2024_cluster/secrets/kustomization.yaml b/apps/2024_cluster/secrets/kustomization.yaml
@@ -17,3 +17,4 @@ resources:
     - pg-secrets.yaml
     - gerrit.yaml
     - mariadb-operator.yaml
+    - rundeck.yaml
diff --git a/apps/2024_cluster/secrets/pg-secrets.yaml b/apps/2024_cluster/secrets/pg-secrets.yaml
@@ -5,8 +5,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:bQZYK+WVohMm,iv:re1JvY9l5MOUSwA2CjbZceO09cPV3QUpwD7FW/8rwK8=,tag:nnRk3bWs3C/6OXlhpjmhfQ==,type:str]
-    password: ENC[AES256_GCM,data:LmAaDD/HVMCKde9p5j1m03h+GElC6Ky8gFQZ2KXeRHheePYQAD/YQ2+6aIh09VBdULFzSpBiisijDCrMKR22wg==,iv:uYu+8Yz6aPcX3xJzIHHCQ5wsihcSpMnAk4KVHr1G5Ls=,tag:aqA7jzvRbCj2D2/Ip3Mb2g==,type:str]
+    username: ENC[AES256_GCM,data:vcazFvOrDUmJ,iv:+TVI8x4Y6shFf9J8nG47ElA9Goqubx9+I3SWOdRHUsY=,tag:LkqttSHBJ6bLWNbFu/SgCw==,type:str]
+    password: ENC[AES256_GCM,data:yCDxH6RGYSjVaSSkCY4/NjrK4uOfos2duHMO/Kev4pA1umdBuLjM+P4kQLRYe+VvsrCPDHlX2RT1r4TydkFq+Q==,iv:FtvnYz6O3b7OMaR4AS91GVOI9XQtbJn/LkKuDHwoza4=,tag:4WV5QpxDJAD9xD+fL646Dg==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -16,16 +16,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dklDazYzZkRHa3BNRWxF
-            eVUzTTA2ZUZoZzdlRXc5RDFrM3cyWUVUdGhnCmtmM254TCt3ekcxck10amc0UG5U
-            Wmg0SFR0ampMc1pyZ2lqZ0NpNjhKMlUKLS0tIFduOTF2QkpaWlNNVUZyN0FFaFlo
-            UHpqT1E3WTkvUE9IV2daUzUveHJEWjgKFY3JjuEiYX02YHQCUYK7cJCNdgOSPW9t
-            +EL2FUHHU5LJO0LGcRdlDMnA9plc5R986iXUunnjSmnPUW6NwljVNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByS09XZ1l5akEyaStoZFo4
+            ejBxNWlHYmUrRWFZV1VseWFoMW5xOGNEZ2swClBBbU5LRUNxZXozQUo2U0ZWVTZB
+            QkNGcU9ualVldVRHRG5HaVBqSzkyVTAKLS0tIEtiZmlnMnZBQTcvYmE3V042TkFV
+            azJqZ1JmUGttbU1TM2d2Z3dWME0xYUUKtWXyIZ0rbs8d+zuVTT1/CAjyKZCPc4CB
+            NMCtZzS2sbVdyMB2COPxkpn98+4cxu1YIg/0tmLAI5+7N9Q87rRaMQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-22T17:41:26Z"
-    mac: ENC[AES256_GCM,data:lvrVzhGUr3GRFvrAwqmrm8m5lo71MidPRG2BdFsUrDbXp/TAhUUTU67qgK93Mif/HgO6R82l1BZKQQH4E/HjT/t8qNTLedPM8nLyEorOMh0NusDwR1GVBsqqc6wEp2Aez0nYGnPhlXtaK1xNizzlkTECr+d+jozgKznI1WTMy1M=,iv:HOnlIi8CT5JufVqxtTVZ2Ifo7co2rrS7xkqe0ymVI5U=,tag:N4jBHKgLIZFGaJVxs3kz/w==,type:str]
+    lastmodified: "2025-02-04T10:22:21Z"
+    mac: ENC[AES256_GCM,data:BPz4tSm+wk2UwKtwMhxC4SeOmmn+lU75/qUd0iGrMmfxuDSlCnTxgENYFbexw+Zvifj0YzKIxRKc8MatjHZNKJxnLypJKps6VB2VwN1SY6PZm+jzz1gOcxb/a0N7lLRg8f0PmfpT3WX74pz4uJruNKIfWqkpLnTmT/HUyxBnXvo=,iv:Zq0EZd6zOEapq9id0eaBbBcMKEMmq/j9QgnoI4MJqt0=,tag:NCduT/PlYv+TVYktJPqjtg==,type:str]
     pgp: []
-    encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -35,8 +35,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:0OvIw7xt,iv:t89szvpCSNW868DRutOBgHmJzuh6GqLJfhOAbegenvA=,tag:GLszcBPFGmqthQfWIlWoYA==,type:str]
-    password: ENC[AES256_GCM,data:w3e7c4OZTpW5bMsMxHXD/HfoDiz+0eEjd/7owLKNa7DBp0SrP/VvFdzHZIPJgMvl9HrLczCFQ06b6+OX9epblA==,iv:itZ+ECb9jRMxomLddHucQEp6+bGkxQmhUn5ZwYsX72g=,tag:BefF05GujVgYgDjY26x/vg==,type:str]
+    username: ENC[AES256_GCM,data:qmAO5Qh8,iv:JK736Pe6lG/bfMJb5CHPrBKvN7uN0vPFZmmhJIXzFcM=,tag:Sgz9c4foqaUsE6F+uGnMPA==,type:str]
+    password: ENC[AES256_GCM,data:ADK173O5nFaXO7ntPYI0m2GdRBoYfolGQYryeSmzjxiZGZ8IVo0kguiE4ysE9gaTgeleLlP43S3R1URGPQ/pAg==,iv:yMvm+S6/SPndegFTikKRA8rsk/iNzZW1vr+kADCV+B0=,tag:Afwj/uOGNiyiAfw+8GCwwQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -46,16 +46,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dklDazYzZkRHa3BNRWxF
-            eVUzTTA2ZUZoZzdlRXc5RDFrM3cyWUVUdGhnCmtmM254TCt3ekcxck10amc0UG5U
-            Wmg0SFR0ampMc1pyZ2lqZ0NpNjhKMlUKLS0tIFduOTF2QkpaWlNNVUZyN0FFaFlo
-            UHpqT1E3WTkvUE9IV2daUzUveHJEWjgKFY3JjuEiYX02YHQCUYK7cJCNdgOSPW9t
-            +EL2FUHHU5LJO0LGcRdlDMnA9plc5R986iXUunnjSmnPUW6NwljVNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByS09XZ1l5akEyaStoZFo4
+            ejBxNWlHYmUrRWFZV1VseWFoMW5xOGNEZ2swClBBbU5LRUNxZXozQUo2U0ZWVTZB
+            QkNGcU9ualVldVRHRG5HaVBqSzkyVTAKLS0tIEtiZmlnMnZBQTcvYmE3V042TkFV
+            azJqZ1JmUGttbU1TM2d2Z3dWME0xYUUKtWXyIZ0rbs8d+zuVTT1/CAjyKZCPc4CB
+            NMCtZzS2sbVdyMB2COPxkpn98+4cxu1YIg/0tmLAI5+7N9Q87rRaMQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-22T17:41:26Z"
-    mac: ENC[AES256_GCM,data:lvrVzhGUr3GRFvrAwqmrm8m5lo71MidPRG2BdFsUrDbXp/TAhUUTU67qgK93Mif/HgO6R82l1BZKQQH4E/HjT/t8qNTLedPM8nLyEorOMh0NusDwR1GVBsqqc6wEp2Aez0nYGnPhlXtaK1xNizzlkTECr+d+jozgKznI1WTMy1M=,iv:HOnlIi8CT5JufVqxtTVZ2Ifo7co2rrS7xkqe0ymVI5U=,tag:N4jBHKgLIZFGaJVxs3kz/w==,type:str]
+    lastmodified: "2025-02-04T10:22:21Z"
+    mac: ENC[AES256_GCM,data:BPz4tSm+wk2UwKtwMhxC4SeOmmn+lU75/qUd0iGrMmfxuDSlCnTxgENYFbexw+Zvifj0YzKIxRKc8MatjHZNKJxnLypJKps6VB2VwN1SY6PZm+jzz1gOcxb/a0N7lLRg8f0PmfpT3WX74pz4uJruNKIfWqkpLnTmT/HUyxBnXvo=,iv:Zq0EZd6zOEapq9id0eaBbBcMKEMmq/j9QgnoI4MJqt0=,tag:NCduT/PlYv+TVYktJPqjtg==,type:str]
     pgp: []
-    encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -65,8 +65,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:gSDI3qQ=,iv:wk60VHiTziqbTuY5RYj5IHNjjyl58J6AiYB6OKLHcIo=,tag:nDLpWHuHMrLFM35KriDH5Q==,type:str]
-    password: ENC[AES256_GCM,data:spfH6bulN8vhnWc0Z3mrUc5joIOhUTG6ongoYDxUCCo7AbSRQeKt+U1f6Z2kiMQ+cVhBDgH50ObcyuyuOsUuYQ==,iv:ifJFMek6HoPvY49IEVCGpkPJjWDqr+6aabIXc4Ov/EU=,tag:dpIMbssiaqHCIlGJnUDROg==,type:str]
+    username: ENC[AES256_GCM,data:QPJx+68=,iv:Hr601HR2aknlVKH3nnkWDxMtD883BM/QWka74JdsRXg=,tag:6VjdJ1JFe1EgXrWYPMLJag==,type:str]
+    password: ENC[AES256_GCM,data:/0s2r15JS1MoaiFuvva9PDeZWWRaz7/OOgsyqRwwJImFY9rlCAg7oeuBOxMwSXvEDgqMB79DsfEZpw7nanRcnQ==,iv:GHTAp6Zf38GVZ6HORsgEWxap1+IxE3lZqDwvNOkACog=,tag:JQfQ/hdHRIRRDb5MceKu5A==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -76,16 +76,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dklDazYzZkRHa3BNRWxF
-            eVUzTTA2ZUZoZzdlRXc5RDFrM3cyWUVUdGhnCmtmM254TCt3ekcxck10amc0UG5U
-            Wmg0SFR0ampMc1pyZ2lqZ0NpNjhKMlUKLS0tIFduOTF2QkpaWlNNVUZyN0FFaFlo
-            UHpqT1E3WTkvUE9IV2daUzUveHJEWjgKFY3JjuEiYX02YHQCUYK7cJCNdgOSPW9t
-            +EL2FUHHU5LJO0LGcRdlDMnA9plc5R986iXUunnjSmnPUW6NwljVNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByS09XZ1l5akEyaStoZFo4
+            ejBxNWlHYmUrRWFZV1VseWFoMW5xOGNEZ2swClBBbU5LRUNxZXozQUo2U0ZWVTZB
+            QkNGcU9ualVldVRHRG5HaVBqSzkyVTAKLS0tIEtiZmlnMnZBQTcvYmE3V042TkFV
+            azJqZ1JmUGttbU1TM2d2Z3dWME0xYUUKtWXyIZ0rbs8d+zuVTT1/CAjyKZCPc4CB
+            NMCtZzS2sbVdyMB2COPxkpn98+4cxu1YIg/0tmLAI5+7N9Q87rRaMQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-22T17:41:26Z"
-    mac: ENC[AES256_GCM,data:lvrVzhGUr3GRFvrAwqmrm8m5lo71MidPRG2BdFsUrDbXp/TAhUUTU67qgK93Mif/HgO6R82l1BZKQQH4E/HjT/t8qNTLedPM8nLyEorOMh0NusDwR1GVBsqqc6wEp2Aez0nYGnPhlXtaK1xNizzlkTECr+d+jozgKznI1WTMy1M=,iv:HOnlIi8CT5JufVqxtTVZ2Ifo7co2rrS7xkqe0ymVI5U=,tag:N4jBHKgLIZFGaJVxs3kz/w==,type:str]
+    lastmodified: "2025-02-04T10:22:21Z"
+    mac: ENC[AES256_GCM,data:BPz4tSm+wk2UwKtwMhxC4SeOmmn+lU75/qUd0iGrMmfxuDSlCnTxgENYFbexw+Zvifj0YzKIxRKc8MatjHZNKJxnLypJKps6VB2VwN1SY6PZm+jzz1gOcxb/a0N7lLRg8f0PmfpT3WX74pz4uJruNKIfWqkpLnTmT/HUyxBnXvo=,iv:Zq0EZd6zOEapq9id0eaBbBcMKEMmq/j9QgnoI4MJqt0=,tag:NCduT/PlYv+TVYktJPqjtg==,type:str]
     pgp: []
-    encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -95,8 +95,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:Z+Snui9TNkaNdjNtSX9hsA==,iv:/aRqfdVtZmAvmfkbN6KfkcDeHTe0qbJPDxNipVzPIBo=,tag:SLYIRlJyQdyhUX6/77HtHg==,type:str]
-    password: ENC[AES256_GCM,data:5G/5ZFG+V9PkobOsmYjh5XB8Ls9MSfjYQc/s+VWVoG3Ay8V0jEIoKfXILrVzO+fxZN6tOfM06omH6+WyZKmZ4g==,iv:3dKqCbR4RjfTOrH7KJnUNaCghtk9Gab+lPdaeFeRn3I=,tag:b5wdhqAIWKeWGbEJjK22iw==,type:str]
+    username: ENC[AES256_GCM,data:mVlyvmTyCN51m5nCVOGPdQ==,iv:SUjSbiKDMWl8dzKu7lXeZj0n9GzMa0Ist7wNBNIZYRI=,tag:JTKfuH9YvtjPV4hOLUoMGQ==,type:str]
+    password: ENC[AES256_GCM,data:mHzbG9HTUn/i8/T8h+PJpgN4I95pR3n8DqhGK//4Hg7uJopQ0EHNsAlbiCqnG/pAN4izVL2AQKfxxgytDQnHBA==,iv:DgO7gmhJfmK9VCtFzfhxgwk5seTH2EdhgG1/8yfGnuM=,tag:A+Ie3C1xSm2E2JB4sFcHsQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -106,16 +106,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dklDazYzZkRHa3BNRWxF
-            eVUzTTA2ZUZoZzdlRXc5RDFrM3cyWUVUdGhnCmtmM254TCt3ekcxck10amc0UG5U
-            Wmg0SFR0ampMc1pyZ2lqZ0NpNjhKMlUKLS0tIFduOTF2QkpaWlNNVUZyN0FFaFlo
-            UHpqT1E3WTkvUE9IV2daUzUveHJEWjgKFY3JjuEiYX02YHQCUYK7cJCNdgOSPW9t
-            +EL2FUHHU5LJO0LGcRdlDMnA9plc5R986iXUunnjSmnPUW6NwljVNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByS09XZ1l5akEyaStoZFo4
+            ejBxNWlHYmUrRWFZV1VseWFoMW5xOGNEZ2swClBBbU5LRUNxZXozQUo2U0ZWVTZB
+            QkNGcU9ualVldVRHRG5HaVBqSzkyVTAKLS0tIEtiZmlnMnZBQTcvYmE3V042TkFV
+            azJqZ1JmUGttbU1TM2d2Z3dWME0xYUUKtWXyIZ0rbs8d+zuVTT1/CAjyKZCPc4CB
+            NMCtZzS2sbVdyMB2COPxkpn98+4cxu1YIg/0tmLAI5+7N9Q87rRaMQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-22T17:41:26Z"
-    mac: ENC[AES256_GCM,data:lvrVzhGUr3GRFvrAwqmrm8m5lo71MidPRG2BdFsUrDbXp/TAhUUTU67qgK93Mif/HgO6R82l1BZKQQH4E/HjT/t8qNTLedPM8nLyEorOMh0NusDwR1GVBsqqc6wEp2Aez0nYGnPhlXtaK1xNizzlkTECr+d+jozgKznI1WTMy1M=,iv:HOnlIi8CT5JufVqxtTVZ2Ifo7co2rrS7xkqe0ymVI5U=,tag:N4jBHKgLIZFGaJVxs3kz/w==,type:str]
+    lastmodified: "2025-02-04T10:22:21Z"
+    mac: ENC[AES256_GCM,data:BPz4tSm+wk2UwKtwMhxC4SeOmmn+lU75/qUd0iGrMmfxuDSlCnTxgENYFbexw+Zvifj0YzKIxRKc8MatjHZNKJxnLypJKps6VB2VwN1SY6PZm+jzz1gOcxb/a0N7lLRg8f0PmfpT3WX74pz4uJruNKIfWqkpLnTmT/HUyxBnXvo=,iv:Zq0EZd6zOEapq9id0eaBbBcMKEMmq/j9QgnoI4MJqt0=,tag:NCduT/PlYv+TVYktJPqjtg==,type:str]
     pgp: []
-    encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -125,8 +125,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:rP59i/g6n6k=,iv:YRL3y6iPjiNIeFFsPv/eNm5KA2aLDeZfNEbduwX5bsY=,tag:Ng+VDJqL7XWT0c0o3OHnPA==,type:str]
-    password: ENC[AES256_GCM,data:3sFcah6+AOv6C/c2H2LNp5Paud3E9UKIDL1xANQkW1BlvQlaBQuRRhjhPiS+lHoMYxhQDzdbFOcTPHnZqyc3jQ==,iv:HmxbAJ2h8L8nLRPjEVs+6letrJNpwKDlOuIhiJu7az0=,tag:KuMx4J8JbjtYvuejWYc9bw==,type:str]
+    username: ENC[AES256_GCM,data:zoszkXKNc+E=,iv:zQ0wJsKpcHu07mIp3085/tpfbjdFXMVDxp8He+eQLrI=,tag:zRkT/wWrC3r1DR27xhck1g==,type:str]
+    password: ENC[AES256_GCM,data:poaMrJRcIGNHhy2Mj8wUSedLXoQMrweB2ZfAXobqtK5r7vvsPS/zQ3sXwTNwx28+SR6wm2TgNOapM7C30PZNow==,iv:4ZYAqG9vFJAciGNbiHSwCkQO28gOSAxNYQeiyvD0AwE=,tag:CRJbKBjvSP/pFUKJcjr8aw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -136,16 +136,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dklDazYzZkRHa3BNRWxF
-            eVUzTTA2ZUZoZzdlRXc5RDFrM3cyWUVUdGhnCmtmM254TCt3ekcxck10amc0UG5U
-            Wmg0SFR0ampMc1pyZ2lqZ0NpNjhKMlUKLS0tIFduOTF2QkpaWlNNVUZyN0FFaFlo
-            UHpqT1E3WTkvUE9IV2daUzUveHJEWjgKFY3JjuEiYX02YHQCUYK7cJCNdgOSPW9t
-            +EL2FUHHU5LJO0LGcRdlDMnA9plc5R986iXUunnjSmnPUW6NwljVNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByS09XZ1l5akEyaStoZFo4
+            ejBxNWlHYmUrRWFZV1VseWFoMW5xOGNEZ2swClBBbU5LRUNxZXozQUo2U0ZWVTZB
+            QkNGcU9ualVldVRHRG5HaVBqSzkyVTAKLS0tIEtiZmlnMnZBQTcvYmE3V042TkFV
+            azJqZ1JmUGttbU1TM2d2Z3dWME0xYUUKtWXyIZ0rbs8d+zuVTT1/CAjyKZCPc4CB
+            NMCtZzS2sbVdyMB2COPxkpn98+4cxu1YIg/0tmLAI5+7N9Q87rRaMQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-22T17:41:26Z"
-    mac: ENC[AES256_GCM,data:lvrVzhGUr3GRFvrAwqmrm8m5lo71MidPRG2BdFsUrDbXp/TAhUUTU67qgK93Mif/HgO6R82l1BZKQQH4E/HjT/t8qNTLedPM8nLyEorOMh0NusDwR1GVBsqqc6wEp2Aez0nYGnPhlXtaK1xNizzlkTECr+d+jozgKznI1WTMy1M=,iv:HOnlIi8CT5JufVqxtTVZ2Ifo7co2rrS7xkqe0ymVI5U=,tag:N4jBHKgLIZFGaJVxs3kz/w==,type:str]
+    lastmodified: "2025-02-04T10:22:21Z"
+    mac: ENC[AES256_GCM,data:BPz4tSm+wk2UwKtwMhxC4SeOmmn+lU75/qUd0iGrMmfxuDSlCnTxgENYFbexw+Zvifj0YzKIxRKc8MatjHZNKJxnLypJKps6VB2VwN1SY6PZm+jzz1gOcxb/a0N7lLRg8f0PmfpT3WX74pz4uJruNKIfWqkpLnTmT/HUyxBnXvo=,iv:Zq0EZd6zOEapq9id0eaBbBcMKEMmq/j9QgnoI4MJqt0=,tag:NCduT/PlYv+TVYktJPqjtg==,type:str]
     pgp: []
-    encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -155,8 +155,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:3MnO710qe+I=,iv:Tokf5f927aCZZe9ytqgUvAixb8PAmXF+o6l38QT16t8=,tag:jsyJmU8/iIzy/P/PjSdBLg==,type:str]
-    password: ENC[AES256_GCM,data:m/AqV3d7GNAk1synUnAvxRiTiuvk8Uwb45KONMo7kJXjh8llGalZ+YEucKnxYiau4qHdX5aBpj5SmGI561Z7Sw==,iv:RavIxidgUexc+w+5ROkIEJA5krvvb7hZgFnG5dlJt78=,tag:FxbYI912CuC9i97KP+N69A==,type:str]
+    username: ENC[AES256_GCM,data:NIvX3jjoVVA=,iv:1gFpGZ3C8LqD8JEGUWMobNHuinm+kDVgG0ySCMkJ1f0=,tag:J9MSwiL8TtSRXwge2QSjlg==,type:str]
+    password: ENC[AES256_GCM,data:AWAEghVW9omys7JgUDQ9XqVh5YidXhPn9RgCKwwPj5dFTN+Qp7nKXNRmI6SlQKXbe0N1yTZbntc0X6CqPugMEg==,iv:l14uMoN0LDQueaZq6zsx05SA0v1Eo1U7pX86lolF75s=,tag:16xfZ0+EfAjvDXxz1GHWcg==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -166,16 +166,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dklDazYzZkRHa3BNRWxF
-            eVUzTTA2ZUZoZzdlRXc5RDFrM3cyWUVUdGhnCmtmM254TCt3ekcxck10amc0UG5U
-            Wmg0SFR0ampMc1pyZ2lqZ0NpNjhKMlUKLS0tIFduOTF2QkpaWlNNVUZyN0FFaFlo
-            UHpqT1E3WTkvUE9IV2daUzUveHJEWjgKFY3JjuEiYX02YHQCUYK7cJCNdgOSPW9t
-            +EL2FUHHU5LJO0LGcRdlDMnA9plc5R986iXUunnjSmnPUW6NwljVNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByS09XZ1l5akEyaStoZFo4
+            ejBxNWlHYmUrRWFZV1VseWFoMW5xOGNEZ2swClBBbU5LRUNxZXozQUo2U0ZWVTZB
+            QkNGcU9ualVldVRHRG5HaVBqSzkyVTAKLS0tIEtiZmlnMnZBQTcvYmE3V042TkFV
+            azJqZ1JmUGttbU1TM2d2Z3dWME0xYUUKtWXyIZ0rbs8d+zuVTT1/CAjyKZCPc4CB
+            NMCtZzS2sbVdyMB2COPxkpn98+4cxu1YIg/0tmLAI5+7N9Q87rRaMQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-22T17:41:26Z"
-    mac: ENC[AES256_GCM,data:lvrVzhGUr3GRFvrAwqmrm8m5lo71MidPRG2BdFsUrDbXp/TAhUUTU67qgK93Mif/HgO6R82l1BZKQQH4E/HjT/t8qNTLedPM8nLyEorOMh0NusDwR1GVBsqqc6wEp2Aez0nYGnPhlXtaK1xNizzlkTECr+d+jozgKznI1WTMy1M=,iv:HOnlIi8CT5JufVqxtTVZ2Ifo7co2rrS7xkqe0ymVI5U=,tag:N4jBHKgLIZFGaJVxs3kz/w==,type:str]
+    lastmodified: "2025-02-04T10:22:21Z"
+    mac: ENC[AES256_GCM,data:BPz4tSm+wk2UwKtwMhxC4SeOmmn+lU75/qUd0iGrMmfxuDSlCnTxgENYFbexw+Zvifj0YzKIxRKc8MatjHZNKJxnLypJKps6VB2VwN1SY6PZm+jzz1gOcxb/a0N7lLRg8f0PmfpT3WX74pz4uJruNKIfWqkpLnTmT/HUyxBnXvo=,iv:Zq0EZd6zOEapq9id0eaBbBcMKEMmq/j9QgnoI4MJqt0=,tag:NCduT/PlYv+TVYktJPqjtg==,type:str]
     pgp: []
-    encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -185,8 +185,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:Ig011F08xsLg0JI=,iv:UBhyWndatdU7ZcTcuwPNRL6Y0Nys2t2FdzcSlHOzYLs=,tag:HX0Z2kOQox+tdafN2NZY6Q==,type:str]
-    password: ENC[AES256_GCM,data:piBidZiiW7P8GHFOoSOHay7nWg5D+5pUctL+IkQaSjS8CvEypmsq7DHjAQIe37iVGailPtVFDpKjBmnmjJFdog==,iv:yU90FrQHYks40kz4ZjKDs7gFIZlLrpkTrQkdFNfsnAw=,tag:2hbV/ABZiMV3fSMN0hy1Mw==,type:str]
+    username: ENC[AES256_GCM,data:yEN/e07DG9ahsoY=,iv:+slDHtoI0B6rweDdpE0tn60YFMXhuDH2q6u8Z95cOcc=,tag:6LOD3ztutWNvJLn+7KOhjw==,type:str]
+    password: ENC[AES256_GCM,data:+eJ9ppiZyht0D0Hvh6OP3JZCOVE5yZMTCkjrJ0O1CwJlwh4IDSXx6wH2/wSdhm/5LsBR9EkJPbSYKSBnj4tOrA==,iv:t+PwZ7rK8zIdSG7LaXCZxvl7xGmUnu1dan9aL3ySUlo=,tag:K0/PD5WaBlwYaynHT1NZkw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -196,16 +196,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dklDazYzZkRHa3BNRWxF
-            eVUzTTA2ZUZoZzdlRXc5RDFrM3cyWUVUdGhnCmtmM254TCt3ekcxck10amc0UG5U
-            Wmg0SFR0ampMc1pyZ2lqZ0NpNjhKMlUKLS0tIFduOTF2QkpaWlNNVUZyN0FFaFlo
-            UHpqT1E3WTkvUE9IV2daUzUveHJEWjgKFY3JjuEiYX02YHQCUYK7cJCNdgOSPW9t
-            +EL2FUHHU5LJO0LGcRdlDMnA9plc5R986iXUunnjSmnPUW6NwljVNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByS09XZ1l5akEyaStoZFo4
+            ejBxNWlHYmUrRWFZV1VseWFoMW5xOGNEZ2swClBBbU5LRUNxZXozQUo2U0ZWVTZB
+            QkNGcU9ualVldVRHRG5HaVBqSzkyVTAKLS0tIEtiZmlnMnZBQTcvYmE3V042TkFV
+            azJqZ1JmUGttbU1TM2d2Z3dWME0xYUUKtWXyIZ0rbs8d+zuVTT1/CAjyKZCPc4CB
+            NMCtZzS2sbVdyMB2COPxkpn98+4cxu1YIg/0tmLAI5+7N9Q87rRaMQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-22T17:41:26Z"
-    mac: ENC[AES256_GCM,data:lvrVzhGUr3GRFvrAwqmrm8m5lo71MidPRG2BdFsUrDbXp/TAhUUTU67qgK93Mif/HgO6R82l1BZKQQH4E/HjT/t8qNTLedPM8nLyEorOMh0NusDwR1GVBsqqc6wEp2Aez0nYGnPhlXtaK1xNizzlkTECr+d+jozgKznI1WTMy1M=,iv:HOnlIi8CT5JufVqxtTVZ2Ifo7co2rrS7xkqe0ymVI5U=,tag:N4jBHKgLIZFGaJVxs3kz/w==,type:str]
+    lastmodified: "2025-02-04T10:22:21Z"
+    mac: ENC[AES256_GCM,data:BPz4tSm+wk2UwKtwMhxC4SeOmmn+lU75/qUd0iGrMmfxuDSlCnTxgENYFbexw+Zvifj0YzKIxRKc8MatjHZNKJxnLypJKps6VB2VwN1SY6PZm+jzz1gOcxb/a0N7lLRg8f0PmfpT3WX74pz4uJruNKIfWqkpLnTmT/HUyxBnXvo=,iv:Zq0EZd6zOEapq9id0eaBbBcMKEMmq/j9QgnoI4MJqt0=,tag:NCduT/PlYv+TVYktJPqjtg==,type:str]
     pgp: []
-    encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -215,8 +215,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:6M0KN9hK+rbHsHA=,iv:EvDFp3vJTqqyemDgQFIYmZgTK3uQNCGNLm/GQaPT7D8=,tag:5eVkDCHWlOq2ONRfEd65AA==,type:str]
-    password: ENC[AES256_GCM,data:Rx1wVsAKsL5CFO00qqERRecdcUB/LmOQQJfIu6+8d8O8lm+vUsh2kmsGLJ636wpHQXj4Og0+oQYZsaJhT636aQ==,iv:w9okYsE6kkG3m7GzbqeN/INSrpsKwnlrOnCSUAwGA5o=,tag:JwLZVdJnwcSmYR7J1FA8Jg==,type:str]
+    username: ENC[AES256_GCM,data:3hR6mUTWdrHoBTI=,iv:KdcFFqDjZKNiOh3kQjMXEuxBig/j61ffh0qj8ca53FY=,tag:h0hUfjfzk9J96snGsov8Ww==,type:str]
+    password: ENC[AES256_GCM,data:gT+iyr5UOFGecf5jSrAa1MIe7EZjcm4/dtEDe+1NK61bV9U8bgjugss00rz8FTszhzN3GuoZqoJw9foMG/fsYg==,iv:c4uFFriHSHCj/uzkj9CqfTZrRKnkuPHgPatlc5+IBLM=,tag:nUJy7Hc4HzNA7zyHTio4OQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -226,16 +226,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dklDazYzZkRHa3BNRWxF
-            eVUzTTA2ZUZoZzdlRXc5RDFrM3cyWUVUdGhnCmtmM254TCt3ekcxck10amc0UG5U
-            Wmg0SFR0ampMc1pyZ2lqZ0NpNjhKMlUKLS0tIFduOTF2QkpaWlNNVUZyN0FFaFlo
-            UHpqT1E3WTkvUE9IV2daUzUveHJEWjgKFY3JjuEiYX02YHQCUYK7cJCNdgOSPW9t
-            +EL2FUHHU5LJO0LGcRdlDMnA9plc5R986iXUunnjSmnPUW6NwljVNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByS09XZ1l5akEyaStoZFo4
+            ejBxNWlHYmUrRWFZV1VseWFoMW5xOGNEZ2swClBBbU5LRUNxZXozQUo2U0ZWVTZB
+            QkNGcU9ualVldVRHRG5HaVBqSzkyVTAKLS0tIEtiZmlnMnZBQTcvYmE3V042TkFV
+            azJqZ1JmUGttbU1TM2d2Z3dWME0xYUUKtWXyIZ0rbs8d+zuVTT1/CAjyKZCPc4CB
+            NMCtZzS2sbVdyMB2COPxkpn98+4cxu1YIg/0tmLAI5+7N9Q87rRaMQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-22T17:41:26Z"
-    mac: ENC[AES256_GCM,data:lvrVzhGUr3GRFvrAwqmrm8m5lo71MidPRG2BdFsUrDbXp/TAhUUTU67qgK93Mif/HgO6R82l1BZKQQH4E/HjT/t8qNTLedPM8nLyEorOMh0NusDwR1GVBsqqc6wEp2Aez0nYGnPhlXtaK1xNizzlkTECr+d+jozgKznI1WTMy1M=,iv:HOnlIi8CT5JufVqxtTVZ2Ifo7co2rrS7xkqe0ymVI5U=,tag:N4jBHKgLIZFGaJVxs3kz/w==,type:str]
+    lastmodified: "2025-02-04T10:22:21Z"
+    mac: ENC[AES256_GCM,data:BPz4tSm+wk2UwKtwMhxC4SeOmmn+lU75/qUd0iGrMmfxuDSlCnTxgENYFbexw+Zvifj0YzKIxRKc8MatjHZNKJxnLypJKps6VB2VwN1SY6PZm+jzz1gOcxb/a0N7lLRg8f0PmfpT3WX74pz4uJruNKIfWqkpLnTmT/HUyxBnXvo=,iv:Zq0EZd6zOEapq9id0eaBbBcMKEMmq/j9QgnoI4MJqt0=,tag:NCduT/PlYv+TVYktJPqjtg==,type:str]
     pgp: []
-    encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -245,8 +245,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:CqOucl7BZd2X,iv:9WT26XcRKZL9Q+1FY+E68OeG4xFoKDpYggrCKweKdt4=,tag:XvvKIrQt4YC5pH0QG2rWYw==,type:str]
-    password: ENC[AES256_GCM,data:kMjfBeRPxJG7QfuyeZzddKD2Fl5PVnvhBaptIuZU5u7mcuPxVZtpauvrXKz7BrXQ1Tng6COXpCDXBVsgZaaLkQ==,iv:n1U8ezJ7DBu2fIMRV9CjWEhDocBvWd5s/Oc03FngbSs=,tag:f80IJrsvbRaDyqlJQrGL2w==,type:str]
+    username: ENC[AES256_GCM,data:fIZPFMXfQ6tb,iv:R4WOGybTuPy5wNtxsa1dzmTNQs9EKHXSmL8KE8Pwmgo=,tag:VojZCPIVh72zHrHOVHRC4w==,type:str]
+    password: ENC[AES256_GCM,data:2LUe03Moi9bKU3jkknrD00dr7XkV6AfuaJeommYJKkbU5pWMLB4tJfo2MyJWeqDMw1pnKIyhrNeihdqSAaKxUA==,iv:8iCa4FDFfDtf3eoaVGG2wLAUZvVpLrSlfwK3bXiuCwU=,tag:0Csz3b8Ms3B3YAbF2Nz8RQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -256,16 +256,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dklDazYzZkRHa3BNRWxF
-            eVUzTTA2ZUZoZzdlRXc5RDFrM3cyWUVUdGhnCmtmM254TCt3ekcxck10amc0UG5U
-            Wmg0SFR0ampMc1pyZ2lqZ0NpNjhKMlUKLS0tIFduOTF2QkpaWlNNVUZyN0FFaFlo
-            UHpqT1E3WTkvUE9IV2daUzUveHJEWjgKFY3JjuEiYX02YHQCUYK7cJCNdgOSPW9t
-            +EL2FUHHU5LJO0LGcRdlDMnA9plc5R986iXUunnjSmnPUW6NwljVNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByS09XZ1l5akEyaStoZFo4
+            ejBxNWlHYmUrRWFZV1VseWFoMW5xOGNEZ2swClBBbU5LRUNxZXozQUo2U0ZWVTZB
+            QkNGcU9ualVldVRHRG5HaVBqSzkyVTAKLS0tIEtiZmlnMnZBQTcvYmE3V042TkFV
+            azJqZ1JmUGttbU1TM2d2Z3dWME0xYUUKtWXyIZ0rbs8d+zuVTT1/CAjyKZCPc4CB
+            NMCtZzS2sbVdyMB2COPxkpn98+4cxu1YIg/0tmLAI5+7N9Q87rRaMQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-22T17:41:26Z"
-    mac: ENC[AES256_GCM,data:lvrVzhGUr3GRFvrAwqmrm8m5lo71MidPRG2BdFsUrDbXp/TAhUUTU67qgK93Mif/HgO6R82l1BZKQQH4E/HjT/t8qNTLedPM8nLyEorOMh0NusDwR1GVBsqqc6wEp2Aez0nYGnPhlXtaK1xNizzlkTECr+d+jozgKznI1WTMy1M=,iv:HOnlIi8CT5JufVqxtTVZ2Ifo7co2rrS7xkqe0ymVI5U=,tag:N4jBHKgLIZFGaJVxs3kz/w==,type:str]
+    lastmodified: "2025-02-04T10:22:21Z"
+    mac: ENC[AES256_GCM,data:BPz4tSm+wk2UwKtwMhxC4SeOmmn+lU75/qUd0iGrMmfxuDSlCnTxgENYFbexw+Zvifj0YzKIxRKc8MatjHZNKJxnLypJKps6VB2VwN1SY6PZm+jzz1gOcxb/a0N7lLRg8f0PmfpT3WX74pz4uJruNKIfWqkpLnTmT/HUyxBnXvo=,iv:Zq0EZd6zOEapq9id0eaBbBcMKEMmq/j9QgnoI4MJqt0=,tag:NCduT/PlYv+TVYktJPqjtg==,type:str]
     pgp: []
-    encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -275,8 +275,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:6+Yg/AKlRw==,iv:ILBDAbAsq9HVAFJhG3feI+K341Suey7LcRkWULi+3DE=,tag:kiKwsOVjBvj5MxbbAoj3Xg==,type:str]
-    password: ENC[AES256_GCM,data:f+D2/vo7JaHh8sS4gK2SO6t5Vx9YXrBTV9MYam+jU8Xq3R4nc8tU7Hr4bXN5/yJSdrF7qcUjDwcJMgs+jxV+AA==,iv:HP+tYSNYLmm6Tuda6dE+w1cCVwM+5eUODFjdIbFrv/0=,tag:Ilq5Nbd6ED4n+ada35vcMA==,type:str]
+    username: ENC[AES256_GCM,data:x4ZKSWQj6Q==,iv:qnz1tJSL8Sq9IZwMbdUJQuc82hmvbuD+0o7dK6UVWkY=,tag:xD26ISMZjtA8c6YfADALqg==,type:str]
+    password: ENC[AES256_GCM,data:k8YRacBeRVjsXDyUn0esy6Tusaz3W6C2D90NLQyqBjkrF+NC8/TfXV3sigqk9Thid5yv3SbD9PFs22Y4CcwfmA==,iv:wkTBDKks0vtE7A9X4YOpuVcFSRSwUlfFURIio21YjLw=,tag:jlT5pNODsv7a2QzMwS2ioQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -286,16 +286,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dklDazYzZkRHa3BNRWxF
-            eVUzTTA2ZUZoZzdlRXc5RDFrM3cyWUVUdGhnCmtmM254TCt3ekcxck10amc0UG5U
-            Wmg0SFR0ampMc1pyZ2lqZ0NpNjhKMlUKLS0tIFduOTF2QkpaWlNNVUZyN0FFaFlo
-            UHpqT1E3WTkvUE9IV2daUzUveHJEWjgKFY3JjuEiYX02YHQCUYK7cJCNdgOSPW9t
-            +EL2FUHHU5LJO0LGcRdlDMnA9plc5R986iXUunnjSmnPUW6NwljVNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByS09XZ1l5akEyaStoZFo4
+            ejBxNWlHYmUrRWFZV1VseWFoMW5xOGNEZ2swClBBbU5LRUNxZXozQUo2U0ZWVTZB
+            QkNGcU9ualVldVRHRG5HaVBqSzkyVTAKLS0tIEtiZmlnMnZBQTcvYmE3V042TkFV
+            azJqZ1JmUGttbU1TM2d2Z3dWME0xYUUKtWXyIZ0rbs8d+zuVTT1/CAjyKZCPc4CB
+            NMCtZzS2sbVdyMB2COPxkpn98+4cxu1YIg/0tmLAI5+7N9Q87rRaMQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-22T17:41:26Z"
-    mac: ENC[AES256_GCM,data:lvrVzhGUr3GRFvrAwqmrm8m5lo71MidPRG2BdFsUrDbXp/TAhUUTU67qgK93Mif/HgO6R82l1BZKQQH4E/HjT/t8qNTLedPM8nLyEorOMh0NusDwR1GVBsqqc6wEp2Aez0nYGnPhlXtaK1xNizzlkTECr+d+jozgKznI1WTMy1M=,iv:HOnlIi8CT5JufVqxtTVZ2Ifo7co2rrS7xkqe0ymVI5U=,tag:N4jBHKgLIZFGaJVxs3kz/w==,type:str]
+    lastmodified: "2025-02-04T10:22:21Z"
+    mac: ENC[AES256_GCM,data:BPz4tSm+wk2UwKtwMhxC4SeOmmn+lU75/qUd0iGrMmfxuDSlCnTxgENYFbexw+Zvifj0YzKIxRKc8MatjHZNKJxnLypJKps6VB2VwN1SY6PZm+jzz1gOcxb/a0N7lLRg8f0PmfpT3WX74pz4uJruNKIfWqkpLnTmT/HUyxBnXvo=,iv:Zq0EZd6zOEapq9id0eaBbBcMKEMmq/j9QgnoI4MJqt0=,tag:NCduT/PlYv+TVYktJPqjtg==,type:str]
     pgp: []
-    encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -305,8 +305,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:jw7wC/kzHgeQGYg=,iv:fyJkBmEOEiz0KfR7g1UBJ/5cJg5jTjlGr1fH5LgCNOY=,tag:KRFgOTWmn8DqJMVBcXgeZg==,type:str]
-    password: ENC[AES256_GCM,data:FK8T55bnVeu9YUyfzL3Oy9RAbCT0qyeTtAdeUSvFGOyUaN7RCHBQjJBqreIOjn0G48QSzK1RiDRJQilsb3i5Bw==,iv:J2tpCTLP5TFab5l47I2HmH9Rtf/574xv4pzmwBUKdn0=,tag:KZE3oifeDFtfnLCPw3+2CA==,type:str]
+    username: ENC[AES256_GCM,data:neNrr2E9411SnGY=,iv:na557Lic+asCpzcSLolYgxy8svWYZPKajOZ2nI3+gLA=,tag:ymRrl73AOoVg/DNyPLzn1Q==,type:str]
+    password: ENC[AES256_GCM,data:KawdpgsOTePoFm6q3rrD9lmT5sZSNDnnA1WhSznO0ZCU3RQBslyixoAMKPiS/AK8XDiSU0WffBlWpCUguLDuMA==,iv:L5NsXNCUzvQw5HRK4mJYBKOsnvtHvPu7N7MJ43L2nAs=,tag:0LWx53S15Rq70aKDJmqeAA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -316,16 +316,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dklDazYzZkRHa3BNRWxF
-            eVUzTTA2ZUZoZzdlRXc5RDFrM3cyWUVUdGhnCmtmM254TCt3ekcxck10amc0UG5U
-            Wmg0SFR0ampMc1pyZ2lqZ0NpNjhKMlUKLS0tIFduOTF2QkpaWlNNVUZyN0FFaFlo
-            UHpqT1E3WTkvUE9IV2daUzUveHJEWjgKFY3JjuEiYX02YHQCUYK7cJCNdgOSPW9t
-            +EL2FUHHU5LJO0LGcRdlDMnA9plc5R986iXUunnjSmnPUW6NwljVNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByS09XZ1l5akEyaStoZFo4
+            ejBxNWlHYmUrRWFZV1VseWFoMW5xOGNEZ2swClBBbU5LRUNxZXozQUo2U0ZWVTZB
+            QkNGcU9ualVldVRHRG5HaVBqSzkyVTAKLS0tIEtiZmlnMnZBQTcvYmE3V042TkFV
+            azJqZ1JmUGttbU1TM2d2Z3dWME0xYUUKtWXyIZ0rbs8d+zuVTT1/CAjyKZCPc4CB
+            NMCtZzS2sbVdyMB2COPxkpn98+4cxu1YIg/0tmLAI5+7N9Q87rRaMQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-22T17:41:26Z"
-    mac: ENC[AES256_GCM,data:lvrVzhGUr3GRFvrAwqmrm8m5lo71MidPRG2BdFsUrDbXp/TAhUUTU67qgK93Mif/HgO6R82l1BZKQQH4E/HjT/t8qNTLedPM8nLyEorOMh0NusDwR1GVBsqqc6wEp2Aez0nYGnPhlXtaK1xNizzlkTECr+d+jozgKznI1WTMy1M=,iv:HOnlIi8CT5JufVqxtTVZ2Ifo7co2rrS7xkqe0ymVI5U=,tag:N4jBHKgLIZFGaJVxs3kz/w==,type:str]
+    lastmodified: "2025-02-04T10:22:21Z"
+    mac: ENC[AES256_GCM,data:BPz4tSm+wk2UwKtwMhxC4SeOmmn+lU75/qUd0iGrMmfxuDSlCnTxgENYFbexw+Zvifj0YzKIxRKc8MatjHZNKJxnLypJKps6VB2VwN1SY6PZm+jzz1gOcxb/a0N7lLRg8f0PmfpT3WX74pz4uJruNKIfWqkpLnTmT/HUyxBnXvo=,iv:Zq0EZd6zOEapq9id0eaBbBcMKEMmq/j9QgnoI4MJqt0=,tag:NCduT/PlYv+TVYktJPqjtg==,type:str]
     pgp: []
-    encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -335,8 +335,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:h1+SFJ11lkQ=,iv:uoPq6vlxbG+Lbnf91/Ak/ZWtAblirsP8kGAUSM6m3A0=,tag:2Ep+ePZpa2c+I/IrFBAplQ==,type:str]
-    password: ENC[AES256_GCM,data:TD1oL3/Qd9JmHiOOpO7DU0YTJA1DFR9eZdQEnGr7R4IZCEWFXj7ZL2IBNa+xfLtll1+q4fqCNThNrhAcMJ2BQg==,iv:TJ5CFJ3v81tUnJ8714PoJ7shRJNyvwbWVtc5bdNbKKc=,tag:/7E9fuMCAybG7GS3yh8mIA==,type:str]
+    username: ENC[AES256_GCM,data:/TPE1aF0X6s=,iv:JCawBQ+wm1wc3ibw6yLBEwIKnV40E4ts/qdHHjWOpRM=,tag:QLJA9XoVhMMWLWUruQkJzA==,type:str]
+    password: ENC[AES256_GCM,data:YGgJ9I7dvISwHcthrW1+Ksj2c/qU13g60rjQ7kdH43ALtMXbWgIHY0Aicpxui+rZ+KpoN2lrstc23190ZE9fQw==,iv:Q1Fk5qNNw5bKUgrHKkG7TFIwpC3Uuv4Xk382P5Nisew=,tag:KBYFkLMSIMNvuIyaRjDGsQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -346,16 +346,16 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dklDazYzZkRHa3BNRWxF
-            eVUzTTA2ZUZoZzdlRXc5RDFrM3cyWUVUdGhnCmtmM254TCt3ekcxck10amc0UG5U
-            Wmg0SFR0ampMc1pyZ2lqZ0NpNjhKMlUKLS0tIFduOTF2QkpaWlNNVUZyN0FFaFlo
-            UHpqT1E3WTkvUE9IV2daUzUveHJEWjgKFY3JjuEiYX02YHQCUYK7cJCNdgOSPW9t
-            +EL2FUHHU5LJO0LGcRdlDMnA9plc5R986iXUunnjSmnPUW6NwljVNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByS09XZ1l5akEyaStoZFo4
+            ejBxNWlHYmUrRWFZV1VseWFoMW5xOGNEZ2swClBBbU5LRUNxZXozQUo2U0ZWVTZB
+            QkNGcU9ualVldVRHRG5HaVBqSzkyVTAKLS0tIEtiZmlnMnZBQTcvYmE3V042TkFV
+            azJqZ1JmUGttbU1TM2d2Z3dWME0xYUUKtWXyIZ0rbs8d+zuVTT1/CAjyKZCPc4CB
+            NMCtZzS2sbVdyMB2COPxkpn98+4cxu1YIg/0tmLAI5+7N9Q87rRaMQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-22T17:41:26Z"
-    mac: ENC[AES256_GCM,data:lvrVzhGUr3GRFvrAwqmrm8m5lo71MidPRG2BdFsUrDbXp/TAhUUTU67qgK93Mif/HgO6R82l1BZKQQH4E/HjT/t8qNTLedPM8nLyEorOMh0NusDwR1GVBsqqc6wEp2Aez0nYGnPhlXtaK1xNizzlkTECr+d+jozgKznI1WTMy1M=,iv:HOnlIi8CT5JufVqxtTVZ2Ifo7co2rrS7xkqe0ymVI5U=,tag:N4jBHKgLIZFGaJVxs3kz/w==,type:str]
+    lastmodified: "2025-02-04T10:22:21Z"
+    mac: ENC[AES256_GCM,data:BPz4tSm+wk2UwKtwMhxC4SeOmmn+lU75/qUd0iGrMmfxuDSlCnTxgENYFbexw+Zvifj0YzKIxRKc8MatjHZNKJxnLypJKps6VB2VwN1SY6PZm+jzz1gOcxb/a0N7lLRg8f0PmfpT3WX74pz4uJruNKIfWqkpLnTmT/HUyxBnXvo=,iv:Zq0EZd6zOEapq9id0eaBbBcMKEMmq/j9QgnoI4MJqt0=,tag:NCduT/PlYv+TVYktJPqjtg==,type:str]
     pgp: []
-    encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
 ---
 apiVersion: v1
@@ -365,8 +365,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    username: ENC[AES256_GCM,data:kTuvCFzpvV0=,iv:4/kvAK+xfFg7W2g2W7glKcIep4RBNBD6evPs9RgeiGM=,tag:baQbyxTmCgOmq3fx2XNg2A==,type:str]
-    password: ENC[AES256_GCM,data:Z92PdJS6ghY33TAITUYVxop4rhyXSjPh0oNWB5rKaw13fA8l7uOvuyqJB6nCCOWk8KMy2XOVAMaStZhy0GniVQ==,iv:JX9CS/g++PUeGrY6eBWfZ8S4VsOWFgMbu+Lw/any9J4=,tag:qA+cMEQlDfMNAWPwJeNwyg==,type:str]
+    username: ENC[AES256_GCM,data:ZYVWX+Z27YQ=,iv:flKk0j2N5bKsz+2QXAmOf6raOVbiXs0fK5QZOlvjBiY=,tag:58A5qDY0xnn9X1omhqsddg==,type:str]
+    password: ENC[AES256_GCM,data:V3maVMswLEl2dY1ph8LEtdZxPQcYjI5xWt6XSjXe4Jv0Dj8anuYg0x4h7O9cM2CxQpluZqrJ52Oxlcp7EDdMAw==,iv:fxnykSSyGqJLdcMrpLdBQ1R8a2RMqPRlAsJgOqpoXTE=,tag:m69e+QFPLzjw1ASJzt5YfQ==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -376,14 +376,44 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3dklDazYzZkRHa3BNRWxF
-            eVUzTTA2ZUZoZzdlRXc5RDFrM3cyWUVUdGhnCmtmM254TCt3ekcxck10amc0UG5U
-            Wmg0SFR0ampMc1pyZ2lqZ0NpNjhKMlUKLS0tIFduOTF2QkpaWlNNVUZyN0FFaFlo
-            UHpqT1E3WTkvUE9IV2daUzUveHJEWjgKFY3JjuEiYX02YHQCUYK7cJCNdgOSPW9t
-            +EL2FUHHU5LJO0LGcRdlDMnA9plc5R986iXUunnjSmnPUW6NwljVNw==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByS09XZ1l5akEyaStoZFo4
+            ejBxNWlHYmUrRWFZV1VseWFoMW5xOGNEZ2swClBBbU5LRUNxZXozQUo2U0ZWVTZB
+            QkNGcU9ualVldVRHRG5HaVBqSzkyVTAKLS0tIEtiZmlnMnZBQTcvYmE3V042TkFV
+            azJqZ1JmUGttbU1TM2d2Z3dWME0xYUUKtWXyIZ0rbs8d+zuVTT1/CAjyKZCPc4CB
+            NMCtZzS2sbVdyMB2COPxkpn98+4cxu1YIg/0tmLAI5+7N9Q87rRaMQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-22T17:41:26Z"
-    mac: ENC[AES256_GCM,data:lvrVzhGUr3GRFvrAwqmrm8m5lo71MidPRG2BdFsUrDbXp/TAhUUTU67qgK93Mif/HgO6R82l1BZKQQH4E/HjT/t8qNTLedPM8nLyEorOMh0NusDwR1GVBsqqc6wEp2Aez0nYGnPhlXtaK1xNizzlkTECr+d+jozgKznI1WTMy1M=,iv:HOnlIi8CT5JufVqxtTVZ2Ifo7co2rrS7xkqe0ymVI5U=,tag:N4jBHKgLIZFGaJVxs3kz/w==,type:str]
+    lastmodified: "2025-02-04T10:22:21Z"
+    mac: ENC[AES256_GCM,data:BPz4tSm+wk2UwKtwMhxC4SeOmmn+lU75/qUd0iGrMmfxuDSlCnTxgENYFbexw+Zvifj0YzKIxRKc8MatjHZNKJxnLypJKps6VB2VwN1SY6PZm+jzz1gOcxb/a0N7lLRg8f0PmfpT3WX74pz4uJruNKIfWqkpLnTmT/HUyxBnXvo=,iv:Zq0EZd6zOEapq9id0eaBbBcMKEMmq/j9QgnoI4MJqt0=,tag:NCduT/PlYv+TVYktJPqjtg==,type:str]
     pgp: []
-    encrypted_regex: ^(routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    version: 3.9.1
+---
+apiVersion: v1
+kind: Secret
+metadata:
+    name: rundeck
+    namespace: postgres-cluster
+type: Opaque
+stringData:
+    username: ENC[AES256_GCM,data:S+CT9Wg7bg==,iv:8ldRw151Y+wNir+WvlGPjGsrEELbvqOYqJZ4eGN81PU=,tag:YgGjpYfrEkMBo1781n3lnA==,type:str]
+    password: ENC[AES256_GCM,data:zxLHVHJLMP9fBr02vwwGOUJCYhI6bd79g2He6FdW6M0eQmIHd30h5HCM4ONdN8tmGumneOgGR3hN8KfhEOcVoA==,iv:Pg20+xg7/INUaC+rC5bPaAyTHG4D0IEi6kh9oMm14Ck=,tag:MHDaabfbHuBeJXFVviIAKA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByS09XZ1l5akEyaStoZFo4
+            ejBxNWlHYmUrRWFZV1VseWFoMW5xOGNEZ2swClBBbU5LRUNxZXozQUo2U0ZWVTZB
+            QkNGcU9ualVldVRHRG5HaVBqSzkyVTAKLS0tIEtiZmlnMnZBQTcvYmE3V042TkFV
+            azJqZ1JmUGttbU1TM2d2Z3dWME0xYUUKtWXyIZ0rbs8d+zuVTT1/CAjyKZCPc4CB
+            NMCtZzS2sbVdyMB2COPxkpn98+4cxu1YIg/0tmLAI5+7N9Q87rRaMQ==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-02-04T10:22:21Z"
+    mac: ENC[AES256_GCM,data:BPz4tSm+wk2UwKtwMhxC4SeOmmn+lU75/qUd0iGrMmfxuDSlCnTxgENYFbexw+Zvifj0YzKIxRKc8MatjHZNKJxnLypJKps6VB2VwN1SY6PZm+jzz1gOcxb/a0N7lLRg8f0PmfpT3WX74pz4uJruNKIfWqkpLnTmT/HUyxBnXvo=,iv:Zq0EZd6zOEapq9id0eaBbBcMKEMmq/j9QgnoI4MJqt0=,tag:NCduT/PlYv+TVYktJPqjtg==,type:str]
+    pgp: []
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
diff --git a/apps/2024_cluster/secrets/rundeck.yaml b/apps/2024_cluster/secrets/rundeck.yaml
@@ -0,0 +1,60 @@
+apiVersion: v1
+stringData:
+    userCredentials: ENC[AES256_GCM,data:R1kDHwWf9r+NIIVo3CT22slN+Y5/ggJ+zV2kF3FkWeqs37Kxio/tR06QwQbv4d/ZBQ==,iv:PDSqCuJQJIfF+fvSonrw7qweRstBRh180SCVA+UAR3w=,tag:6isAvtN0rW9s/dyHlcP+cA==,type:str]
+kind: Secret
+metadata:
+    name: user-credentials-secret
+    namespace: rundeck
+type: Opaque
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByTTZJTFpoNEhSVG1MR1Zu
+            bzJxejYxdTBuUEk1bVRqbG9JMFNHd0pyc3pJClluRXhGSi8zN2xYRnNzdGNtRmlm
+            d1VkOVVuSHdnK2xvL05YcWloaXYrdXcKLS0tIEYzN2lzNm5RcHpJdEZvR3ZmMmRp
+            d3NycEpLYlJNbGo3dmROZWRJN1N1YzAK98pP7pVlAVzt7GPLqDlcvkxejhxWWu3s
+            yrORn8aOMF1dhh/cP9StBhoAyTV+4tlMHPpjDiXFeys+7qgOCdQsVA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-02-04T10:27:09Z"
+    mac: ENC[AES256_GCM,data:PV9ZyhQ4indAhX/XKjOJRTSvKOC4CgKp8CCvCbz0dQb4zFImq0EfpHexZzg/xuE8EjO0W1jVF8Rc2aZxwk2mMU2t5kE9H9sNKBNE0OCqYGEgzV/GSRna15BtmO2yDS8oixfPZ4fZuCXxOoW8t3iCCLDEld1oFMU4BqlR2Vo0AWw=,iv:wljXsYdPHwUPdQWFl3e+BSi0nCCOYEBl8GShvtYJJw4=,tag:rrKQQAN+fEHq/s7PVPbxaw==,type:str]
+    pgp: []
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    version: 3.9.1
+---
+apiVersion: v1
+stringData:
+    jdbc: ENC[AES256_GCM,data:aW7yGs7P9DKxddQhrnfAvJ9/kQZf3ZZ4MT8BCN8GuA61O2nPj7UONqR7MMzsFApcqw9ClkbRvkSsZJlxmq1JFpk05qTYL12XOM/NQfL/6+ulVEHe2BzFeZYWINuXm+ZcsBh4mcsjyV9uIDHTqh622CF2jt0YUP2SDzlwayFzT11Xbl+qfwP5IZDFFYepAoRtoLUmi/B2xC3y414=,iv:Y8gHD1DXGu1aDq7LTn11fyhIeRtLGOVYUGEb4mmbFF4=,tag:5qRHwTZTsgF9NbDILbJ0ng==,type:str]
+    user: ENC[AES256_GCM,data:Hh0mbwUtbw==,iv:bAF8YaZdioYbpJmYnUNJZI2ihqPO+njCFj+TUId+P3E=,tag:C1w7vAhSgnRrEJ2ugkorzw==,type:str]
+    password: ENC[AES256_GCM,data:cvVA4xJr9S4VZmuH6KH+eDzDg0pPRBgnlBKXgfwM6IwvWzHLAZG6sMhc4K20py5xAx0LNvhkFPa7zuPJ+uXs0A==,iv:BD796UT0TDGK7btmtaREom+9VBSQ2DtNu8hE3eQlxAc=,tag:QYO3GyzEZpKgQg0Y61NRSg==,type:str]
+    type: ENC[AES256_GCM,data:IdEgT98T02U3Xdk7okSqyedgJMRI,iv:xtZXmpQqbK9fbmSUsg9s8QSDzvoZFKZWzmSCb0yD030=,tag:lLAX8lX2RPg9IRE0fodFyg==,type:str]
+kind: Secret
+metadata:
+    name: rundeck-database-secret
+    namespace: rundeck
+type: Opaque
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByTTZJTFpoNEhSVG1MR1Zu
+            bzJxejYxdTBuUEk1bVRqbG9JMFNHd0pyc3pJClluRXhGSi8zN2xYRnNzdGNtRmlm
+            d1VkOVVuSHdnK2xvL05YcWloaXYrdXcKLS0tIEYzN2lzNm5RcHpJdEZvR3ZmMmRp
+            d3NycEpLYlJNbGo3dmROZWRJN1N1YzAK98pP7pVlAVzt7GPLqDlcvkxejhxWWu3s
+            yrORn8aOMF1dhh/cP9StBhoAyTV+4tlMHPpjDiXFeys+7qgOCdQsVA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-02-04T10:27:09Z"
+    mac: ENC[AES256_GCM,data:PV9ZyhQ4indAhX/XKjOJRTSvKOC4CgKp8CCvCbz0dQb4zFImq0EfpHexZzg/xuE8EjO0W1jVF8Rc2aZxwk2mMU2t5kE9H9sNKBNE0OCqYGEgzV/GSRna15BtmO2yDS8oixfPZ4fZuCXxOoW8t3iCCLDEld1oFMU4BqlR2Vo0AWw=,iv:wljXsYdPHwUPdQWFl3e+BSi0nCCOYEBl8GShvtYJJw4=,tag:rrKQQAN+fEHq/s7PVPbxaw==,type:str]
+    pgp: []
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    version: 3.9.1
diff --git a/apps/base/rundeck/kustomization.yaml b/apps/base/rundeck/kustomization.yaml
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: rundeck
+resources:
+    - repository.yaml
+    - release.yaml
diff --git a/apps/base/rundeck/release.yaml b/apps/base/rundeck/release.yaml
@@ -0,0 +1,70 @@
+apiVersion: helm.toolkit.fluxcd.io/v2beta2
+kind: HelmRelease
+metadata:
+    name: rundeck
+    namespace: rundeck
+spec:
+    releaseName: rundeck
+    chart:
+        spec:
+            version: 2.8.0
+            chart: rundeck
+            sourceRef:
+                kind: HelmRepository
+                name: rundeck
+    interval: 60m
+    install:
+        remediation:
+            retries: 3
+    values:
+        image:
+            tag: 5.8.0
+        externUrl: https://rundeck.midnightthoughts.space
+        executionLogs:
+            claim:
+                enabled: true
+                storageClass: ceph-filesystem
+                accessMode: ReadWriteMany
+                size: 1G
+        data:
+            claim:
+                enabled: true
+                storageClass: ceph-filesystem
+                accessMode: ReadWriteMany
+                size: 1G
+        addons:
+            claim:
+                enabled: true
+                storageClass: ceph-filesystem
+                accessMode: ReadWriteMany
+                size: 1G
+        plugins:
+            claim:
+                enabled: true
+                storageClass: ceph-filesystem
+                accessMode: ReadWriteMany
+                size: 1G
+        nginx:
+            enabled: false
+
+        ingress:
+            enabled: true
+            className: traefik
+            annotations:
+                cert-manager.io/cluster-issuer: letsencrypt-dns
+            hosts:
+                - host: rundeck.midnightthoughts.space
+                  paths:
+                      - path: /
+                        pathType: ImplementationSpecific
+            tls:
+                - secretName: rundeck.midnightthoughts.space-tls
+                  hosts:
+                      - rundeck.midnightthoughts.space
+        persistence:
+            enabled: true
+            claim:
+                create: true
+                storageClass: ceph-filesystem
+                accessMode: ReadWriteMany
+                size: 1G
diff --git a/apps/base/rundeck/repository.yaml b/apps/base/rundeck/repository.yaml
@@ -0,0 +1,8 @@
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+    name: rundeck
+    namespace: rundeck
+spec:
+    interval: 5m
+    url: https://eugenmayer.github.io/helm-charts/
diff --git a/infrastructure/configs/cnpg-cluster.yaml b/infrastructure/configs/cnpg-cluster.yaml
@@ -11,14 +11,14 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoUk5sSGt5bVY0Z0JURUx4
-            dmVIb1pDdUhPMmF1aWF1dkhYWVVIRGZyclY4CnZpQktGUXBtQTRENWEwTzdBMVJX
-            VlJodVZTZVVranczUnBFSFJ6aVlGZjgKLS0tIGtScjQ0N25qZ0lYeWdQU1FRK1pF
-            S0FYN0ZYT0FzVFNrNjU3QmNYajlzNncKAYDjKrgJu5Tp/M1Gk3458Jcw5PZyo34Y
-            z5JatxkGZCPGRUYp1bbPBCdjm+9NyWUJySYWk8sPsAL3cY5xKhsgDA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOXlBaDFkbWY4b2dxRzN1
+            SkZNaFByTmlrbllrb2JYZXJmSmp0eThYdlNZCkpkSG40ZG11L0lab2RGa2UvL1BV
+            cmxGVkFDTGhWby9DUzV1dEFxZTFKQjAKLS0tIDNlQ3lyT05LRW1QbE5DNzJSOUdy
+            clBZVkFHcjFLemdFd1p1M0ttTmsxLzgKczm43BeWp2u9p9WJ2ncGMFvI/0HyJo/e
+            9YeeQIAv4EQHNyikvxLvpOuTXOnkqhO5yQzU5ghelJ8f03PiQMHZpg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-01-16T15:51:03Z"
-    mac: ENC[AES256_GCM,data:yH3jh76TOXn7hg++MsVatpSZVopjeK2BIA5r6CPC9W47al98FT+w0bmNQH3AYkkS/emORbDvJS0yW9zobQTDU0EeM5mliWW4sTkGlIH1jobKF7CEjzRwzy0flHJuncMzEqzxkpup4Tu3cFwIb3+WRdscsZttP4ojeXBnt6wCNcE=,iv:j/zf9fJJVxUFHc8VSqPQEPK9oYyMHXmC7rZACgRjHec=,tag:xgrS7QakEh1NGS4fDv1hzQ==,type:str]
+    lastmodified: "2025-02-04T10:27:39Z"
+    mac: ENC[AES256_GCM,data:UuVjYm6og6B/YiOvgL2dlvX9oSOY9xpfU73ypSfpnIwVQokr5Xj04vjNTok37ozKXsgwne3FSgBC7qe+A84ZSHHLhlXcCcH2PSMrGeOymo6Kcnw+VJ0NoTKAFl4Uu8k+oZMUsMQ+IhlymvrYdoUMDuXWc7B0OrXc5qhf0jyjfys=,iv:9TwvINSW6van1A8hAnpEW1CXAiGXibhY1hEldY4BcVc=,tag:DQ3vbhWZWUIjmRhfOQF09Q==,type:str]
     pgp: []
     encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
@@ -30,8 +30,8 @@ metadata:
     namespace: postgres-cluster
 type: Opaque
 stringData:
-    ACCESS_KEY_ID: ENC[AES256_GCM,data:D3Rt8XMHLiJn2PDKt5Xai2Mkl3U=,iv:+oQoHjk3OsuuiOLL+87KRa8nl9KKNBdrFfTWco/omQw=,tag:8umgTeyeWCoRrVcef7aeEg==,type:str]
-    ACCESS_SECRET_KEY: ENC[AES256_GCM,data:u37D/0Zpd79qv15/EKlRCoNhxRhOOKelNy5jkk7O0A6FRTqrHEBDtw==,iv:zSL9pMxz8hRf0hJURcF8AGw0mxeRZvQFjnRne4WTy1c=,tag:SPQqiwW0nnUSG9v7KLAvjw==,type:str]
+    ACCESS_KEY_ID: ENC[AES256_GCM,data:bLbsDOvsJToq9IO7XcAbccAzVzM=,iv:AMnPAsaauVgGNG3rKBcatSYq4VhX+/gHdAAamjbFTf8=,tag:wXrQ5LL+Iq1TPmA0Cz2WeQ==,type:str]
+    ACCESS_SECRET_KEY: ENC[AES256_GCM,data:EkdT4N1nmLcVIOzMrLNLrQxsm3Hl3eX/4NBUD8E+VwuEKzq4qgptdQ==,iv:UCEmrnHqBvya6tqsJXeuYBES/z06uCTtSS6A6iMoqzY=,tag:vI0+uJoaqeqeuh0OZzQyzA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -41,14 +41,14 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoUk5sSGt5bVY0Z0JURUx4
-            dmVIb1pDdUhPMmF1aWF1dkhYWVVIRGZyclY4CnZpQktGUXBtQTRENWEwTzdBMVJX
-            VlJodVZTZVVranczUnBFSFJ6aVlGZjgKLS0tIGtScjQ0N25qZ0lYeWdQU1FRK1pF
-            S0FYN0ZYT0FzVFNrNjU3QmNYajlzNncKAYDjKrgJu5Tp/M1Gk3458Jcw5PZyo34Y
-            z5JatxkGZCPGRUYp1bbPBCdjm+9NyWUJySYWk8sPsAL3cY5xKhsgDA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOXlBaDFkbWY4b2dxRzN1
+            SkZNaFByTmlrbllrb2JYZXJmSmp0eThYdlNZCkpkSG40ZG11L0lab2RGa2UvL1BV
+            cmxGVkFDTGhWby9DUzV1dEFxZTFKQjAKLS0tIDNlQ3lyT05LRW1QbE5DNzJSOUdy
+            clBZVkFHcjFLemdFd1p1M0ttTmsxLzgKczm43BeWp2u9p9WJ2ncGMFvI/0HyJo/e
+            9YeeQIAv4EQHNyikvxLvpOuTXOnkqhO5yQzU5ghelJ8f03PiQMHZpg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-01-16T15:51:03Z"
-    mac: ENC[AES256_GCM,data:yH3jh76TOXn7hg++MsVatpSZVopjeK2BIA5r6CPC9W47al98FT+w0bmNQH3AYkkS/emORbDvJS0yW9zobQTDU0EeM5mliWW4sTkGlIH1jobKF7CEjzRwzy0flHJuncMzEqzxkpup4Tu3cFwIb3+WRdscsZttP4ojeXBnt6wCNcE=,iv:j/zf9fJJVxUFHc8VSqPQEPK9oYyMHXmC7rZACgRjHec=,tag:xgrS7QakEh1NGS4fDv1hzQ==,type:str]
+    lastmodified: "2025-02-04T10:27:39Z"
+    mac: ENC[AES256_GCM,data:UuVjYm6og6B/YiOvgL2dlvX9oSOY9xpfU73ypSfpnIwVQokr5Xj04vjNTok37ozKXsgwne3FSgBC7qe+A84ZSHHLhlXcCcH2PSMrGeOymo6Kcnw+VJ0NoTKAFl4Uu8k+oZMUsMQ+IhlymvrYdoUMDuXWc7B0OrXc5qhf0jyjfys=,iv:9TwvINSW6van1A8hAnpEW1CXAiGXibhY1hEldY4BcVc=,tag:DQ3vbhWZWUIjmRhfOQF09Q==,type:str]
     pgp: []
     encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
@@ -78,16 +78,16 @@ spec:
             s3Credentials:
                 accessKeyId:
                     name: pg-s3-credentials
-                    key: ENC[AES256_GCM,data:1uN4o1yhPnaFDBIv1w==,iv:k7Ho+SvsTXcPyUabeva31IW3+nFcjXhoxPZPZrmf9z8=,tag:27jgrAIhwaWk9UXy/c/h9g==,type:str]
+                    key: ENC[AES256_GCM,data:YaA/sgnc3wSrfcHH0g==,iv:FH7zflMXfdXOEvEOFEHQyNUt5oFLwbTve8MptHy8GhQ=,tag:nVtLJJcdh0Hl4IFFOMbVmQ==,type:str]
                 secretAccessKey:
                     name: pg-s3-credentials
-                    key: ENC[AES256_GCM,data:DKvaAUIO7aDSeRNAzhn4ewo=,iv:euHGnUOx5aMRL9h4svqFIq9aOobhxZgWMMpSIuqh34A=,tag:vzKTGZLpkD2hndwZqpbQSg==,type:str]
+                    key: ENC[AES256_GCM,data:kQWZ8rqpLSXsKnoN+wcJ4Ao=,iv:gX+jJnH8he08liC3bWqWFexfQ0h71EchNrLtUTdQ5bs=,tag:gRDhTPc8dU6K92rgjW+x9Q==,type:str]
             wal:
                 compression: gzip
                 maxParallel: 8
             data:
-                compression: ENC[AES256_GCM,data:M9/eMA==,iv:Sa7iWBPdrWNYKxpOfI6egVx/djFohEfVgRoe9sncges=,tag:T7AICgqt2uaGadXWXSFjnQ==,type:str]
-                immediateCheckpoint: ENC[AES256_GCM,data:03FcIQ==,iv:z6tEWm6LYTf+oZNmjGyXe3SlqeNL97V6NP8Tu12SR4E=,tag:O2XND5GbSCKdZfJTDcLCug==,type:bool]
+                compression: ENC[AES256_GCM,data:JL/2ew==,iv:Ae948RFRQx4n+OhMd8KBflDuSEqrUXvi99h+FgoM2VQ=,tag:G8ZP6lkUYrN1STxfYymGyw==,type:str]
+                immediateCheckpoint: ENC[AES256_GCM,data:F2UdqA==,iv:xsMccqWk2j5gIGUUIARR1+aASLbLlOG2pOXTRRmIe3g=,tag:+NgXfNk1CneokJ/jwsKRKQ==,type:bool]
         retentionPolicy: 60d
     managed:
         roles:
@@ -169,6 +169,12 @@ spec:
               superuser: false
               passwordSecret:
                 name: bugzilla
+            - name: rundeck
+              ensure: present
+              login: true
+              superuser: false
+              passwordSecret:
+                name: rundeck
     #bootstrap:
     #    initdb:
     #        import:
@@ -229,14 +235,14 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoUk5sSGt5bVY0Z0JURUx4
-            dmVIb1pDdUhPMmF1aWF1dkhYWVVIRGZyclY4CnZpQktGUXBtQTRENWEwTzdBMVJX
-            VlJodVZTZVVranczUnBFSFJ6aVlGZjgKLS0tIGtScjQ0N25qZ0lYeWdQU1FRK1pF
-            S0FYN0ZYT0FzVFNrNjU3QmNYajlzNncKAYDjKrgJu5Tp/M1Gk3458Jcw5PZyo34Y
-            z5JatxkGZCPGRUYp1bbPBCdjm+9NyWUJySYWk8sPsAL3cY5xKhsgDA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOXlBaDFkbWY4b2dxRzN1
+            SkZNaFByTmlrbllrb2JYZXJmSmp0eThYdlNZCkpkSG40ZG11L0lab2RGa2UvL1BV
+            cmxGVkFDTGhWby9DUzV1dEFxZTFKQjAKLS0tIDNlQ3lyT05LRW1QbE5DNzJSOUdy
+            clBZVkFHcjFLemdFd1p1M0ttTmsxLzgKczm43BeWp2u9p9WJ2ncGMFvI/0HyJo/e
+            9YeeQIAv4EQHNyikvxLvpOuTXOnkqhO5yQzU5ghelJ8f03PiQMHZpg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-01-16T15:51:03Z"
-    mac: ENC[AES256_GCM,data:yH3jh76TOXn7hg++MsVatpSZVopjeK2BIA5r6CPC9W47al98FT+w0bmNQH3AYkkS/emORbDvJS0yW9zobQTDU0EeM5mliWW4sTkGlIH1jobKF7CEjzRwzy0flHJuncMzEqzxkpup4Tu3cFwIb3+WRdscsZttP4ojeXBnt6wCNcE=,iv:j/zf9fJJVxUFHc8VSqPQEPK9oYyMHXmC7rZACgRjHec=,tag:xgrS7QakEh1NGS4fDv1hzQ==,type:str]
+    lastmodified: "2025-02-04T10:27:39Z"
+    mac: ENC[AES256_GCM,data:UuVjYm6og6B/YiOvgL2dlvX9oSOY9xpfU73ypSfpnIwVQokr5Xj04vjNTok37ozKXsgwne3FSgBC7qe+A84ZSHHLhlXcCcH2PSMrGeOymo6Kcnw+VJ0NoTKAFl4Uu8k+oZMUsMQ+IhlymvrYdoUMDuXWc7B0OrXc5qhf0jyjfys=,iv:9TwvINSW6van1A8hAnpEW1CXAiGXibhY1hEldY4BcVc=,tag:DQ3vbhWZWUIjmRhfOQF09Q==,type:str]
     pgp: []
     encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
@@ -261,14 +267,14 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoUk5sSGt5bVY0Z0JURUx4
-            dmVIb1pDdUhPMmF1aWF1dkhYWVVIRGZyclY4CnZpQktGUXBtQTRENWEwTzdBMVJX
-            VlJodVZTZVVranczUnBFSFJ6aVlGZjgKLS0tIGtScjQ0N25qZ0lYeWdQU1FRK1pF
-            S0FYN0ZYT0FzVFNrNjU3QmNYajlzNncKAYDjKrgJu5Tp/M1Gk3458Jcw5PZyo34Y
-            z5JatxkGZCPGRUYp1bbPBCdjm+9NyWUJySYWk8sPsAL3cY5xKhsgDA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOXlBaDFkbWY4b2dxRzN1
+            SkZNaFByTmlrbllrb2JYZXJmSmp0eThYdlNZCkpkSG40ZG11L0lab2RGa2UvL1BV
+            cmxGVkFDTGhWby9DUzV1dEFxZTFKQjAKLS0tIDNlQ3lyT05LRW1QbE5DNzJSOUdy
+            clBZVkFHcjFLemdFd1p1M0ttTmsxLzgKczm43BeWp2u9p9WJ2ncGMFvI/0HyJo/e
+            9YeeQIAv4EQHNyikvxLvpOuTXOnkqhO5yQzU5ghelJ8f03PiQMHZpg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-01-16T15:51:03Z"
-    mac: ENC[AES256_GCM,data:yH3jh76TOXn7hg++MsVatpSZVopjeK2BIA5r6CPC9W47al98FT+w0bmNQH3AYkkS/emORbDvJS0yW9zobQTDU0EeM5mliWW4sTkGlIH1jobKF7CEjzRwzy0flHJuncMzEqzxkpup4Tu3cFwIb3+WRdscsZttP4ojeXBnt6wCNcE=,iv:j/zf9fJJVxUFHc8VSqPQEPK9oYyMHXmC7rZACgRjHec=,tag:xgrS7QakEh1NGS4fDv1hzQ==,type:str]
+    lastmodified: "2025-02-04T10:27:39Z"
+    mac: ENC[AES256_GCM,data:UuVjYm6og6B/YiOvgL2dlvX9oSOY9xpfU73ypSfpnIwVQokr5Xj04vjNTok37ozKXsgwne3FSgBC7qe+A84ZSHHLhlXcCcH2PSMrGeOymo6Kcnw+VJ0NoTKAFl4Uu8k+oZMUsMQ+IhlymvrYdoUMDuXWc7B0OrXc5qhf0jyjfys=,iv:9TwvINSW6van1A8hAnpEW1CXAiGXibhY1hEldY4BcVc=,tag:DQ3vbhWZWUIjmRhfOQF09Q==,type:str]
     pgp: []
     encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1
@@ -294,14 +300,45 @@ sops:
         - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
           enc: |
             -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBoUk5sSGt5bVY0Z0JURUx4
-            dmVIb1pDdUhPMmF1aWF1dkhYWVVIRGZyclY4CnZpQktGUXBtQTRENWEwTzdBMVJX
-            VlJodVZTZVVranczUnBFSFJ6aVlGZjgKLS0tIGtScjQ0N25qZ0lYeWdQU1FRK1pF
-            S0FYN0ZYT0FzVFNrNjU3QmNYajlzNncKAYDjKrgJu5Tp/M1Gk3458Jcw5PZyo34Y
-            z5JatxkGZCPGRUYp1bbPBCdjm+9NyWUJySYWk8sPsAL3cY5xKhsgDA==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOXlBaDFkbWY4b2dxRzN1
+            SkZNaFByTmlrbllrb2JYZXJmSmp0eThYdlNZCkpkSG40ZG11L0lab2RGa2UvL1BV
+            cmxGVkFDTGhWby9DUzV1dEFxZTFKQjAKLS0tIDNlQ3lyT05LRW1QbE5DNzJSOUdy
+            clBZVkFHcjFLemdFd1p1M0ttTmsxLzgKczm43BeWp2u9p9WJ2ncGMFvI/0HyJo/e
+            9YeeQIAv4EQHNyikvxLvpOuTXOnkqhO5yQzU5ghelJ8f03PiQMHZpg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-02-04T10:27:39Z"
+    mac: ENC[AES256_GCM,data:UuVjYm6og6B/YiOvgL2dlvX9oSOY9xpfU73ypSfpnIwVQokr5Xj04vjNTok37ozKXsgwne3FSgBC7qe+A84ZSHHLhlXcCcH2PSMrGeOymo6Kcnw+VJ0NoTKAFl4Uu8k+oZMUsMQ+IhlymvrYdoUMDuXWc7B0OrXc5qhf0jyjfys=,iv:9TwvINSW6van1A8hAnpEW1CXAiGXibhY1hEldY4BcVc=,tag:DQ3vbhWZWUIjmRhfOQF09Q==,type:str]
+    pgp: []
+    encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
+    version: 3.9.1
+---
+apiVersion: postgresql.cnpg.io/v1
+kind: Database
+metadata:
+    name: rundeck
+    namespace: postgres-cluster
+spec:
+    name: rundeck
+    owner: rundeck
+    cluster:
+        name: pg-cluster-v2
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArOXlBaDFkbWY4b2dxRzN1
+            SkZNaFByTmlrbllrb2JYZXJmSmp0eThYdlNZCkpkSG40ZG11L0lab2RGa2UvL1BV
+            cmxGVkFDTGhWby9DUzV1dEFxZTFKQjAKLS0tIDNlQ3lyT05LRW1QbE5DNzJSOUdy
+            clBZVkFHcjFLemdFd1p1M0ttTmsxLzgKczm43BeWp2u9p9WJ2ncGMFvI/0HyJo/e
+            9YeeQIAv4EQHNyikvxLvpOuTXOnkqhO5yQzU5ghelJ8f03PiQMHZpg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-01-16T15:51:03Z"
-    mac: ENC[AES256_GCM,data:yH3jh76TOXn7hg++MsVatpSZVopjeK2BIA5r6CPC9W47al98FT+w0bmNQH3AYkkS/emORbDvJS0yW9zobQTDU0EeM5mliWW4sTkGlIH1jobKF7CEjzRwzy0flHJuncMzEqzxkpup4Tu3cFwIb3+WRdscsZttP4ojeXBnt6wCNcE=,iv:j/zf9fJJVxUFHc8VSqPQEPK9oYyMHXmC7rZACgRjHec=,tag:xgrS7QakEh1NGS4fDv1hzQ==,type:str]
+    lastmodified: "2025-02-04T10:27:39Z"
+    mac: ENC[AES256_GCM,data:UuVjYm6og6B/YiOvgL2dlvX9oSOY9xpfU73ypSfpnIwVQokr5Xj04vjNTok37ozKXsgwne3FSgBC7qe+A84ZSHHLhlXcCcH2PSMrGeOymo6Kcnw+VJ0NoTKAFl4Uu8k+oZMUsMQ+IhlymvrYdoUMDuXWc7B0OrXc5qhf0jyjfys=,iv:9TwvINSW6van1A8hAnpEW1CXAiGXibhY1hEldY4BcVc=,tag:DQ3vbhWZWUIjmRhfOQF09Q==,type:str]
     pgp: []
     encrypted_regex: ^(adminPassword|adminEmail|jenkinsAdminEmail|securityRealm|gerrit.config|routing_key|DATABASE_URL|SMTP_PASSWORD|SECRET_KEY_BASE|admin_password|extraCommands|key|clickhouseDatabaseURL|databaseURL|client_id|client_secret|secret_key_base|otp_secret|private_key|public_key|primaryKey|deterministicKey|keyDerivationSalt|token|clientId|secretKey|installationId|installationKey|uriOverride|adminToken.value|password.value|sql_password|erlangCookie|AUTHENTICATION_PASSWORD|ROOM_API_SECRET_KEY|adminPassword|configPassword|adminUser|configUser|MAIL_PASSWORD|APP_KEY|api_key|api_secret|keys|livekit_key|livekit_secret|secret_key|admin_pass|admin_email|mariadbPassword|mariadbRootPassword|privateKey|data|stringData|PASSWD|password|pass|postgresPassword|postgresqlPassword|redminePassword|smtpPassword|registration_shared_secret|shared_secret|secret|admin_token|integrationKey|rootPassword)$
     version: 3.9.1

	cluster Infrastructure files for Nordgedanken and Midnightthoughts.
	git clone git://archive.git.mtrnord.blog/MTRNord/cluster.git
	Log \| Files \| Refs \| README

M	apps/2024_cluster/kustomization.yaml	\|	1	+
M	apps/2024_cluster/namespaces/kustomization.yaml	\|	1	+
A	apps/2024_cluster/namespaces/rundeck.yaml	\|	4	++++
M	apps/2024_cluster/secrets/kustomization.yaml	\|	1	+
M	apps/2024_cluster/secrets/pg-secrets.yaml	\|	290	++++++++++++++++++++++++++++++++++++++++++++-----------------------------------
A	apps/2024_cluster/secrets/rundeck.yaml	\|	60	++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
A	apps/base/rundeck/kustomization.yaml	\|	6	++++++
A	apps/base/rundeck/release.yaml	\|	70	++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
A	apps/base/rundeck/repository.yaml	\|	8	++++++++
M	infrastructure/configs/cnpg-cluster.yaml	\|	119	++++++++++++++++++++++++++++++++++++++++++++++++++++---------------------------